Extracted

• • Target

    fd524f0c3300ff84f2fb7ec61945c1b6fff3d93207601a970ba8075235fe3928.exe

  • Size

    84KB

  • MD5

    e597d964afe9a09bc7f9b27943ab044f

  • SHA1

    b583b9293091aa36ac38a669fbc98d254aecdacf

  • SHA256

    fd524f0c3300ff84f2fb7ec61945c1b6fff3d93207601a970ba8075235fe3928

  • SHA512

    6acd46f31a6e0948f642450954083cb19e689e15b7cc0557c325b9c28ff6db1a13d4c416b12d2c13431660137f4d64bdb1e633cfab7b595bad89ac74889e3c90

  • SSDEEP

    1536:rc0P3OQeCTnISPJpXC7LCV9qQ/cK8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmj:I0NVhILC7/cS3PDyH6n8djlLYR7xrt

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2